mirror of
				https://github.com/iiab/iiab.git
				synced 2025-03-09 15:40:17 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			51 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
			
		
		
	
	
			51 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
| ## XS Config override
 | |
| ##
 | |
| 
 | |
| # Load additional iptables modules (nat helpers)
 | |
| #   Default: -none-
 | |
| # Space separated list of nat helpers (e.g. 'nf_nat_ftp nf_nat_irc'), which
 | |
| # are loaded after the firewall rules are applied. Options for the helpers are
 | |
| # stored in /etc/modprobe.conf.
 | |
| IPTABLES_MODULES="nf_conntrack nf_conntrack_ipv4 nf_nat_ftp nf_conntrack_ftp nf_nat_irc nf_conntrack_irc nf_nat_sip nf_conntrack_sip nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_conntrack_pptp"
 | |
| 
 | |
| # Unload modules on restart and stop
 | |
| #   Value: yes|no,  default: yes
 | |
| # This option has to be 'yes' to get to a sane state for a firewall
 | |
| # restart or stop. Only set to 'no' if there are problems unloading netfilter
 | |
| # modules.
 | |
| IPTABLES_MODULES_UNLOAD="yes"
 | |
| 
 | |
| # Save current firewall rules on stop.
 | |
| #   Value: yes|no,  default: no
 | |
| # Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped
 | |
| # (e.g. on system shutdown).
 | |
| IPTABLES_SAVE_ON_STOP="no"
 | |
| 
 | |
| # Save current firewall rules on restart.
 | |
| #   Value: yes|no,  default: no
 | |
| # Saves all firewall rules to /etc/sysconfig/iptables if firewall gets
 | |
| # restarted.
 | |
| IPTABLES_SAVE_ON_RESTART="no"
 | |
| 
 | |
| # Save (and restore) rule and chain counter.
 | |
| #   Value: yes|no,  default: no
 | |
| # Save counters for rules and chains to /etc/sysconfig/iptables if
 | |
| # 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or
 | |
| # SAVE_ON_RESTART is enabled.
 | |
| IPTABLES_SAVE_COUNTER="no"
 | |
| 
 | |
| # Numeric status output
 | |
| #   Value: yes|no,  default: yes
 | |
| # Print IP addresses and port numbers in numeric format in the status output.
 | |
| IPTABLES_STATUS_NUMERIC="yes"
 | |
| 
 | |
| # Verbose status output
 | |
| #   Value: yes|no,  default: yes
 | |
| # Print info about the number of packets and bytes plus the "input-" and
 | |
| # "outputdevice" in the status output.
 | |
| IPTABLES_STATUS_VERBOSE="no"
 | |
| 
 | |
| # Status output with numbered lines
 | |
| #   Value: yes|no,  default: yes
 | |
| # Print a counter/number for every rule in the status output.
 | |
| IPTABLES_STATUS_LINENUMBERS="yes"
 |